Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft
File:                     J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft (raw, json)
Hash identifier:          HpDFkqLFVeAaXwnBOprx9Z2AKxRr9kyIhr0J1Z1WEKM=
Subject key identifier:   B5:B4:36:F1:B8:0F:A7:2A:53:19:82:76:E7:DB:1A:39:C4:9D:CA:65
Authority key identifier: 27:C6:FB:50:70:F4:38:39:50:3C:6B:DD:F5:16:DE:87:C7:FB:89:07
Certificate issuer:       /CN=27c6fb5070f43839503c6bddf516de87c7fb8907
Certificate serial:       018F874ABDBFADB6E793EB34F629FCE061CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft
Manifest number:          1173
Signing time:             Fri 17 May 2024 16:02:53 +0000
Manifest this update:     Fri 17 May 2024 16:02:53 +0000
Manifest next update:     Sat 18 May 2024 16:02:53 +0000
Files and hashes:         1: J8b7UHD0ODlQPGvd9Rbeh8f7iQc.crl (hash: YElD6XXc/Our28hzOnz+r9OzuSvs0jDKCPlRyTe5eFA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:bd:bf:ad:b6:e7:93:eb:34:f6:29:fc:e0:61:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c6fb5070f43839503c6bddf516de87c7fb8907
        Validity
            Not Before: May 17 16:02:53 2024 GMT
            Not After : May 18 16:02:53 2024 GMT
        Subject: CN=b5b436f1b80fa72a53198276e7db1a39c49dca65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:61:54:92:be:12:d5:17:34:c7:34:14:40:6a:
                    de:3b:9d:cd:c3:5b:fc:b7:cc:41:1d:41:78:67:15:
                    c6:d1:7e:dd:73:2a:f2:0d:c0:5c:75:cb:ca:e8:16:
                    20:2e:2a:b2:ee:cd:db:9c:30:51:a6:17:90:64:96:
                    c6:d1:40:29:35:fb:05:22:0d:29:75:15:6e:7e:0f:
                    94:42:ca:88:dc:00:21:a0:8c:63:f0:4e:ee:e7:ac:
                    86:f7:f9:c3:c4:ba:59:4c:e4:69:3e:8c:c3:86:de:
                    69:b5:89:11:5c:50:78:15:d9:61:0e:90:20:f3:da:
                    98:2d:1f:ff:a8:9f:52:e2:48:5b:87:e6:85:de:6b:
                    87:ee:96:8b:cd:be:33:cf:f1:d3:a2:be:7a:f6:d7:
                    47:a6:c7:13:0e:59:3c:27:6f:51:2d:09:fa:bb:8d:
                    7a:44:b1:22:6f:f0:72:02:e0:3f:9f:f1:ab:97:8c:
                    a7:51:66:87:fb:ac:2e:59:8a:a5:e1:6f:59:43:74:
                    ed:4d:6b:64:3a:34:d9:98:dc:e9:b8:74:54:13:d9:
                    ff:4c:e5:01:78:78:1c:15:47:4b:ab:b2:78:49:f1:
                    22:8a:e3:ba:21:8f:e8:9c:4e:d1:08:1f:19:09:60:
                    17:12:34:da:36:b3:4c:3d:9b:d1:d1:7c:66:b5:13:
                    79:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B4:36:F1:B8:0F:A7:2A:53:19:82:76:E7:DB:1A:39:C4:9D:CA:65
            X509v3 Authority Key Identifier:
                keyid:27:C6:FB:50:70:F4:38:39:50:3C:6B:DD:F5:16:DE:87:C7:FB:89:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:9c:4c:82:c6:ab:8b:7c:fb:01:b5:ee:21:84:5f:a0:ff:c7:
         2f:79:99:89:1d:99:be:11:b3:49:08:d1:a2:57:d8:4c:57:4d:
         68:b8:dd:cb:8c:fb:df:b6:40:82:06:e3:39:65:e8:d8:52:94:
         fd:81:20:57:0e:c4:7b:b3:60:1d:56:06:70:1d:f8:9f:c7:5a:
         0b:2d:02:00:1d:76:fc:0c:d5:e0:2f:36:48:14:14:f8:df:4d:
         47:63:f7:30:bf:f2:76:3d:bd:68:57:17:08:5c:ba:62:26:c5:
         49:82:e7:6d:83:1f:40:24:35:a5:cd:2a:4d:99:af:b9:5c:7d:
         64:29:33:05:4b:c8:a7:fc:98:74:08:a6:aa:bb:58:0c:ec:2a:
         27:ac:0e:19:2c:ad:b9:94:fc:f0:9a:5f:52:c9:72:c4:ca:ef:
         b7:3a:50:46:fb:58:7b:8d:dc:01:b3:42:02:62:32:c5:9d:5f:
         2d:74:e8:ce:40:13:93:ee:1c:7d:3a:82:92:fe:78:10:d5:3d:
         f6:ea:9d:dc:4f:b1:cc:45:f6:8f:8b:23:a4:30:76:25:2b:54:
         3e:1a:27:62:e3:e6:67:ef:41:d8:d1:12:58:68:65:a3:48:35:
         ee:28:13:e8:3e:45:cd:d1:5c:55:14:54:5c:fc:bc:dd:89:87:
         13:49:c3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:14:12 2024 by rpki-client on console-ams.rpki-client.org